Andrea Schultz from the Department of Homeland Security, Commercial Facilities Sector, Power Point Presentation from the 2012 FTI Seminar on Venue Emergency Preparedness.
Measures of Dispersion and Variability: Range, QD, AD and SD
Andrea Schultz, Dept. of Homeland Security, Power Point Presentation
1. The Office of Infrastructure Protection
National Protection and Programs Directorate
Department of Homeland Security
Commercial Facilities Sector Specific Agency Overview
Fox Theatre Institute Seminar
13 November 2012
2. Commercial Facilities Overview
CF is a diverse, vast and virtually unregulated sector consisting of eight
distinct subsectors; Retail, Lodging, Sports Leagues, Real Estate, Gaming
Entertainment and Media, Outdoor Events and Public Assembly.
CF resources and products fall into a number of categories: 1) facility
assessment tools; 2) awareness materials – posters, videos, and webinars;
3) training materials and on-line courses; 4) protective measures guides;
5) leveraging efforts and resources of public and private sector partners.
The public-private partnerships are completely voluntary and need to
account for the concerns and priorities of the private sector
CF business model is open access with high volume of persons going
through the facility. Therefore security measures have to be tailored to
those concerns and heavily reliant on the awareness and training of
employees.
3. DHS Programs Overview
Active Shooter Program
Risk Self- Assessment Tool
Protective Security Advisor Program
DHS Awareness Training Courses
Protective Measures Guide
Training Videos
3
4. Active Shooter Program
The Department has developed a multimedia package to assist commercial
facilities owners and operators on how to prepare for and respond to an
active shooter in their facility. The components that make up the Active
Shooter program includes the following:
• Active Shooter: How to Respond Materials
• Active Shooter: What You Can Do - Independent Study Course
• Active Shooter: Workshop Series
• Active Shooter: Webinar
5. Active Shooter – How To Respond Materials
Material consists of 3 products:
– Basic Guide Book
– Break Room poster
– Pocket Emergency Measures
Guide
FEMA Emergency Management
Institute online training: (IS-907)
Active Shooter, What You Can Do
http://training.fema.gov/EMIWeb/IS/
IS907.asp
5
6. Active Shooter: What You Can Do-
Independent Study Course
The Department has developed an
independent online study
course, Active Shooter: What You Can
Do, to provide Commercial Facilities
Sector owners, operators, and
employees with guidance on how to
prepare for and respond to active
shooter crisis situations. (over
125,000 completed)
Access this course through the
Federal Emergency Management
Agency Emergency Management
Institute at
http://training.fema.gov/EMIWeb/IS/IS
907.asp.
Trainer’s packet to be available soon.
In final stages of development.
6
7. Active Shooter Workshop Series
These scenario-based workshops help private sector professionals and law
enforcement representatives from Federal, State, and local agencies learn
how to prepare for, and respond to, an active shooter situation through
facilitated discussion.
Through the course of the exercise, participants evaluate current response
concepts, plans, and capabilities for coordinated response to an active
shooter incident.
To register for an Active Shooter Workshop, contact
ASworkshop@hq.dhs.gov.
8. Active Shooter Webinar
On September 27, 2011, the Department hosted a 90-minute interactive
virtual roundtable designed to help the private and public sector understand
the importance of developing an emergency response plan and the need to
train employees on how to respond if confronted with an active shooter.
Participants learned about the three types of active shooters and how their
planning cycles and behaviors differ.
• Workplace/School
• Criminal
• Ideological
Access the Webinar at https://connect.hsin.gov/asaware2011
9. Risk Self-Assessment Tool (RSAT)
A free and secure Web-based application to assist managers of
amusement and theme parks with the identification and management of
security vulnerabilities. RSAT uses facility input in combination with threat
and consequence estimates to conduct a comprehensive risk assessment
RSAT modules consists of the following:
• Lodging
• Racetracks
• Convention Centers
• Amusement and Theme Parks
• Stadiums and Arenas
• Performing Art Centers
• Shopping Centers
• Available January 2013
9
10. Risk Self-Assessment Tool
The tool provides the following two reports once the assessment is
complete:
The Self-Assessment Report - provides facility management with
information regarding its existing security strengths, most vulnerable
areas, and options for enhancements.
The Benchmark Report - compares the user’s facility to similar types of
facilities that have completed RSAT assessments.
Additionally, RSAT incorporates Protected Critical Infrastructure Information
(PCII) protections into the self-assessment process to ensure that the
information entered into RSAT will be protected from public disclosure
under the Freedom of Information Act and similar State and local disclosure
laws, and from use in civil litigation or as the basis for regulatory action.
10
11. RSAT Lifecycle
1. Facility recognizes need 2. Requests User ID via 3. Registration is vetted & approved;
to pursue risk assessment. RSAT Secure Portal facility receives User ID/Password.
(https://RSAT.ANL.GOV)
4. Facility completes the 5. Assessment Report 6. Once 25 facilities of
RSAT survey. now available. the same type have
(Submission to DHS is submitted data, a
optional but required to
Benchmark Report is
access Benchmark Report).
available.
12. DHS Awareness Training Courses
Training Courses
– Surveillance Detection Training for
Commercial Infrastructure Operators
and Security Staff Course (3 day)
– Protective Measures Course (2 day)
– Bombing Prevention Workshop (1
day)
– Private Sector Counterterrorism
Awareness Workshop (1 day)
– IED Search Procedures (1 day)
– IED Awareness Bomb Threat
Management Workshop (4 hrs)
– Soft Target Awareness Course (4 hrs)
For more information e-mail the Office of
Infrastructure Protection at
OBP@dhs.gov
12
13. Online Training Courses
IS 906 Workplace Security Awareness
– This course provides guidance to individuals and organizations on how to improve the security in your
workplace. No workplace—be it an office building, construction site, factory floor, or retail store—is
immune from security threats.
IS 907 Active Shooter: What You Can Do
– Upon completing this course, the participant will be able to:
• Describe actions to take when confronted with an active shooter and responding law enforcement
officials.
• Recognize potential workplace violence indicators.
• Describe actions to take to prevent and prepare for potential active shooter incidents.
• Describe how to manage the consequences of an active shooter incident.
– This course is not written for law enforcement officers, but for non-law enforcement
employees. The material may provide law enforcement officers information on
recommended actions for non-law enforcement employees to take should they be
confronted with an active shooter situation.
IS 912 Retail Security Awareness: Understanding the Hidden Hazards
The purpose of this course is to make persons involved in commercial retail operations
aware of the actions they can take to identify and report suspicious purchases or thefts of
products that actors could use in terrorist or other criminal activities.
13
14. Training Videos
An example of awareness materials developed for
industry employees.
– Developed in collaboration with industry
professionals
– Provides information to help employees identify
and report suspicious activities and threats in a
timely manner
– Available at www.dhs.gov/cfsector
(streaming and downloadable)
• No Reservations: Suspicious Behavior in Hotels
(Spanish version now available)
• Check-it What’s in the Bag
• What’s In Store
Options for Consideration in the event of an
Active Shooter incident
– Available for download on HSIN-CS
14
15.
16. SSTEP Series
Sector-Specific Tabletop Exercise Program; designed for each sector for use by
the critical infrastructure owner and operators. Provide CI O/O with useful
exercise planning and conduct template to address sector-specific
threats, issues, and concerns.
– Information Sharing Series
• Retail
• Lodging
• Sports Leagues
• Outdoor Events (Amusement and Theme Parks)
• Dams
• Chemical Facilities
– Supply Chain
– Major Earthquake
– Workplace Aggression
16
17. In Production
Online Training
Surveillance Awareness (early 2013)
Best Practices for Screening Patrons at Public Assembly Venues guide
SSTEP for Cyber threats
Information Sharing Exercise Series for Gaming Industry, with SSTEP to
follow
VBIED Awareness Workshop Series
17
18. For more information visit:
www.dhs.gov/criticalinfrastructure
Andrea Schultz, andrea.schultz@hq.dhs.gov
Jim Hardy, james.hardy@hq.dhs.gov
CFSTeam@hq.dhs.gov
www.dhs.gov/cfsector
Notes de l'éditeur
…the Protective Measures Guide for the U.S. Lodging Industry. Released in 2010, this excellent resource was developed in collaboration with AH&LA to provide options for hotels to consider when implementing protective measures. (Vic was a contributor!)The guide features:An overview of terrorist objectives and threatAn overview of key vulnerabilities of hotelsProtective Measures in several categories such as Planning and Preparedness, Incident Response, Personnel, Access Control, Barriers, Communication and Notification, Monitoring Surveillance and Inspection, Information Security and Cybersecurity, and Infrastructure Interdependencies.Also includes comprehensive appendices of additional resources – Federal and otherwise – available to the hotelsThis FOUO guide is available on the Commercial Facilities Sector portal of HSIN (or you can email me).
Unfortunately, active shooters can strike just about anywhere, which we see more and more often in the news. The CF Sector has produced a simple guide, a break-room poster, and wallet-sized business cards that have immediate actions to take in the event of an active shooter. The Materials have been developed with input from the Emergency Services Sector, the Office for Bombing Prevention, our SCC and the ES-SCC. You can find the materials at www.dhs.gov/cfsector. Also, how this product came to be reinforces a great point. It’s not just a great product, but a great example of coordination – it was initiated by our partners (in this case, our Retail partners). All of the products that the CF SSA produces is in collaboration with our private sector partners - YOU.The next evolution of these materials was online, interactive training, which you can take at no-cost at the FEMA Emergency Management Institute’s Independent Study Program at the website listed: (IS-907) Active Shooter, What You Can Do . It was released in March, along with another great course (IS-906), Basic Workplace Security Awareness . I’ll talk about those a few slides down.).
Unfortunately, active shooters can strike just about anywhere, which we see more and more often in the news. The CF Sector has produced a simple guide, a break-room poster, and wallet-sized business cards that have immediate actions to take in the event of an active shooter. The Materials have been developed with input from the Emergency Services Sector, the Office for Bombing Prevention, our SCC and the ES-SCC. You can find the materials at www.dhs.gov/cfsector. Also, how this product came to be reinforces a great point. It’s not just a great product, but a great example of coordination – it was initiated by our partners (in this case, our Retail partners). All of the products that the CF SSA produces is in collaboration with our private sector partners - YOU.The next evolution of these materials was online, interactive training, which you can take at no-cost at the FEMA Emergency Management Institute’s Independent Study Program at the website listed: (IS-907) Active Shooter, What You Can Do . It was released in March, along with another great course (IS-906), Basic Workplace Security Awareness . I’ll talk about those a few slides down.).
Finally, the Risk Self Assessment Tool is a Secure, Web-based application designed to assist managers of hotels and with the identification and management of security vulnerabilities to reduce risk to their facilities.Combines with threat and consequence estimates to conduct a comprehensive risk assessment.FeaturesVenue Characterization asks the user questions about the venue specifically, allows you to choose the threats most applicable to you, then collects information about the facility’s general security posture.Threat Ratings evaluates facility security against both natural and man-made hazardsVulnerability Assessment collects information about the facility's general security postureReportsSelf –Assessment Report provides information regarding its existing security strengths, vulnerabilities, and options for enhancements.Benchmark Report compares the user’s facility to similar types of facilities that have completed RSAT assessments The wonderful thing about this tool is that DHS resources are limited, and if you are a smaller hotel that may not rate one of the above assessments, or you are a larger hotel that just wants to conduct a self-assessment, this tool is for you. And you know it will be good because Victor was on our Subject Matter Expert panel of developers….(All submitted assessments are protected under the Protected Critical Infrastructure Information (PCII) Program. From FOIA requests, from liability, from discovery
Finally, the Risk Self Assessment Tool is a Secure, Web-based application designed to assist managers of hotels and with the identification and management of security vulnerabilities to reduce risk to their facilities.Combines with threat and consequence estimates to conduct a comprehensive risk assessment.FeaturesVenue Characterization asks the user questions about the venue specifically, allows you to choose the threats most applicable to you, then collects information about the facility’s general security posture.Threat Ratings evaluates facility security against both natural and man-made hazardsVulnerability Assessment collects information about the facility's general security postureReportsSelf –Assessment Report provides information regarding its existing security strengths, vulnerabilities, and options for enhancements.Benchmark Report compares the user’s facility to similar types of facilities that have completed RSAT assessments The wonderful thing about this tool is that DHS resources are limited, and if you are a smaller hotel that may not rate one of the above assessments, or you are a larger hotel that just wants to conduct a self-assessment, this tool is for you. And you know it will be good because Victor was on our Subject Matter Expert panel of developers….(All submitted assessments are protected under the Protected Critical Infrastructure Information (PCII) Program. From FOIA requests, from liability, from discovery
Let’s get into some training. DHS IP, in particular, the Office of Bombing Prevention, provides a lot of great, free training courses to the private sector throughout the country. Some of the courses include: Surveillance Detection: focuses on enhancing awareness of terrorist surveillance tactics and techniques, available detection measures, and ways to identify terrorist activities, and it helps you to develop your Surveillance Detection Plan. 3 day course intended for security managers, security/safety staff, managers, supervisors, and operators. Half classroom, half “in the field” – you get to case buildings and pretend to be a bad guy, then you have to identify bad guys!Protective Measures Course: Provides public and private sector security officers, mid-level safety and security supervisors, and property managers with the ability to identify vulnerabilities and employ appropriate protective measures dependent upon an individual facility’s design and operation. Bombing Prevention Workshop: Provides partners with enhanced knowledge of preventative measures and planning protocols to address improvised explosive device (IED threats).Counterterrorism Awareness Workshop: Designed to improve the knowledge of Private Sector security professionals by teaching soft target awareness, surveillance detection, and improvised explosive device (IED) recognition. Excellent class – discusses Trends in Terrorism, IED Threats and Explosive Effects, Suicide Bombers.IED Awareness/Bomb Threat Management Workshop: Informs partners how to manage IED threats by providing specific safety precautions associated with explosive incidents and bomb threats. Soft Target Awareness: Provides general terrorism awareness, prevention, and protection information to hourly, front line employees.
Let’s get into some training. DHS IP, in particular, the Office of Bombing Prevention, provides a lot of great, free training courses to the private sector throughout the country. Some of the courses include: Surveillance Detection: focuses on enhancing awareness of terrorist surveillance tactics and techniques, available detection measures, and ways to identify terrorist activities, and it helps you to develop your Surveillance Detection Plan. 3 day course intended for security managers, security/safety staff, managers, supervisors, and operators. Half classroom, half “in the field” – you get to case buildings and pretend to be a bad guy, then you have to identify bad guys!Protective Measures Course: Provides public and private sector security officers, mid-level safety and security supervisors, and property managers with the ability to identify vulnerabilities and employ appropriate protective measures dependent upon an individual facility’s design and operation. Bombing Prevention Workshop: Provides partners with enhanced knowledge of preventative measures and planning protocols to address improvised explosive device (IED threats).Counterterrorism Awareness Workshop: Designed to improve the knowledge of Private Sector security professionals by teaching soft target awareness, surveillance detection, and improvised explosive device (IED) recognition. Excellent class – discusses Trends in Terrorism, IED Threats and Explosive Effects, Suicide Bombers.IED Awareness/Bomb Threat Management Workshop: Informs partners how to manage IED threats by providing specific safety precautions associated with explosive incidents and bomb threats. Soft Target Awareness: Provides general terrorism awareness, prevention, and protection information to hourly, front line employees.
We also collaborated with AH&LA to produce No Reservations: Suspicious Behavior in Hotels, a 10 minute awareness video for all hotel staff from front desk employees to guest room attendants to valets. It provides information to help employees identify and report suspicious activities and threats in a timely manner. The video is available at www.dhs.gov/cfsector - both streaming and downloadable. Spanish versions will be available soon as well.(Granted, watching this video, this is the single-most dangerous hotel ever – some of the suspicious activities are a little obvious or “on the nose;” however, this audience is at the owner/operator or security leader level. The true audience for this video is everyone else at your property – valets, front desk, guest room attendants, kitchen staff, maintenance, housekeeping – those that work in the hotel everyday but are not necessarily well-versed in security or what suspicious behavior looks like. Play this video to teach them what to look for!) Again, all of these hotel-themed products, the active shooter materials…were the result of the public-private partnership – the ideas were yours!
We also collaborated with AH&LA to produce No Reservations: Suspicious Behavior in Hotels, a 10 minute awareness video for all hotel staff from front desk employees to guest room attendants to valets. It provides information to help employees identify and report suspicious activities and threats in a timely manner. The video is available at www.dhs.gov/cfsector - both streaming and downloadable. Spanish versions will be available soon as well.(Granted, watching this video, this is the single-most dangerous hotel ever – some of the suspicious activities are a little obvious or “on the nose;” however, this audience is at the owner/operator or security leader level. The true audience for this video is everyone else at your property – valets, front desk, guest room attendants, kitchen staff, maintenance, housekeeping – those that work in the hotel everyday but are not necessarily well-versed in security or what suspicious behavior looks like. Play this video to teach them what to look for!) Again, all of these hotel-themed products, the active shooter materials…were the result of the public-private partnership – the ideas were yours!
We also collaborated with AH&LA to produce No Reservations: Suspicious Behavior in Hotels, a 10 minute awareness video for all hotel staff from front desk employees to guest room attendants to valets. It provides information to help employees identify and report suspicious activities and threats in a timely manner. The video is available at www.dhs.gov/cfsector - both streaming and downloadable. Spanish versions will be available soon as well.(Granted, watching this video, this is the single-most dangerous hotel ever – some of the suspicious activities are a little obvious or “on the nose;” however, this audience is at the owner/operator or security leader level. The true audience for this video is everyone else at your property – valets, front desk, guest room attendants, kitchen staff, maintenance, housekeeping – those that work in the hotel everyday but are not necessarily well-versed in security or what suspicious behavior looks like. Play this video to teach them what to look for!) Again, all of these hotel-themed products, the active shooter materials…were the result of the public-private partnership – the ideas were yours!